$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa File: 2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa (raw, json) Hash identifier: VlZSgpZPchLADyEShuos9EJCj3cBqajUla0wS0sDDm4= Subject key identifier: DD:A9:37:92:34:19:2B:6F:82:16:CF:74:11:54:01:BF:BB:50:4C:61 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849E7BA79719FFA2F992AA507E0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 22612 IP address blocks: 209.188.18.0/26 maxlen: 26 209.188.18.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:79:71:9f:fa:2f:99:2a:a5:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=a6bf0c65-7582-4f1b-8940-5a0d2eac0c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:26:3c:34:f7:52:e7:e1:a5:71:fd:93:ac: 13:fe:a0:d6:df:a8:e3:c9:eb:ba:cd:39:7b:4e:40: 48:9d:6d:2e:0c:3c:28:40:ff:69:bd:7f:a2:22:69: 2a:45:8c:56:2d:4f:b4:8c:84:07:7c:f2:e0:22:ae: 9b:52:87:91:16:17:82:db:31:f3:31:d5:96:73:af: 83:2c:8e:46:a9:ab:a8:87:e3:3e:73:3e:a1:f2:bb: f2:ee:d5:9a:95:80:ee:b2:5b:36:8f:59:4a:f6:83: 1e:35:55:70:ba:0b:59:3c:30:a6:68:2f:6c:b0:c9: 28:59:67:ef:5c:4f:76:f4:1d:b0:62:ab:d4:05:3d: a1:88:0d:18:b0:8b:18:8e:d2:03:25:33:0d:71:dc: 49:02:db:24:7e:34:c6:10:30:ea:d7:b5:ff:82:74: 00:26:a9:31:a2:d6:63:2b:09:d5:37:ae:6d:6e:fd: f4:ac:0b:3b:bb:79:78:65:6a:ea:01:fa:12:74:f8: 75:9a:b1:e3:1f:75:91:d2:fe:e4:a7:74:6b:87:11: 2c:47:cb:97:ed:c2:44:a2:c4:0c:8f:69:a4:0d:43: 01:ea:66:1c:44:08:00:77:05:49:55:f8:3f:f1:d7: 7e:ef:1b:19:9f:6a:02:c2:00:b5:6b:3a:77:05:41: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A9:37:92:34:19:2B:6F:82:16:CF:74:11:54:01:BF:BB:50:4C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.18.0/26 209.188.18.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6c:7a:69:3b:78:c1:fc:ab:66:52:f6:18:ef:2a:e1:bc:ae: b1:eb:8b:55:c5:c4:21:53:cd:0c:54:c9:ef:3a:b9:f2:d8:27: 09:97:d5:07:5b:c0:74:0e:24:f4:8f:34:e8:49:db:44:1f:b0: 45:13:75:e0:4f:07:2d:2b:a4:05:18:c9:9c:2b:09:9f:99:12: 77:0d:2d:c5:ab:7e:12:0d:57:f2:70:ab:c4:4f:ba:bc:3b:f5: 78:e5:ed:5d:43:1d:f7:4c:a5:09:37:c6:95:9a:51:cc:06:69: 7f:20:61:08:21:c7:c7:e9:28:50:47:e8:30:a4:84:3d:a8:81: af:ab:22:cc:46:1a:da:95:98:49:f4:6c:f3:24:0c:fa:bc:92: a4:5f:8a:0d:1c:af:b7:ce:ec:8e:56:7c:60:a3:57:de:2f:2e: 77:87:37:50:48:50:13:f0:db:fa:b5:53:d5:54:65:e4:d2:b9: eb:01:4d:7d:ff:2c:ec:6a:f4:e1:d4:aa:b7:f3:86:e1:1b:6d: 40:2a:d4:70:37:d0:66:aa:81:fe:d9:5f:81:39:6a:e9:80:35: 63:38:49:3c:cb:ea:9e:fd:74:cc:b4:6d:5e:2b:fe:fe:e1:c6: aa:cd:a6:d5:1e:66:95:70:e1:1b:6b:17:96:2e:42:8b:1f:5c: 67:b5:9b:50 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnnunlxn/ovmSqlB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YTZiZjBjNjUtNzU4Mi00ZjFiLTg5NDAtNWEwZDJlYWMwYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu8mPDT3UufhpXH9k6wT/qDW36jjyeu6zTl7 TkBInW0uDDwoQP9pvX+iImkqRYxWLU+0jIQHfPLgIq6bUoeRFheC2zHzMdWWc6+D LI5Gqauoh+M+cz6h8rvy7tWalYDusls2j1lK9oMeNVVwugtZPDCmaC9ssMkoWWfv XE929B2wYqvUBT2hiA0YsIsYjtIDJTMNcdxJAtskfjTGEDDq17X/gnQAJqkxotZj KwnVN65tbv30rAs7u3l4ZWrqAfoSdPh1mrHjH3WR0v7kp3RrhxEsR8uX7cJEosQM j2mkDUMB6mYcRAgAdwVJVfg/8dd+7xsZn2oCwgC1azp3BUFI2QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN2pN5I0GStvghbPdBFUAb+7UExhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMjk5NWYwOWUtMGQ3NS0z YTA5LTg1YjAtZGZmOGY2OTI1ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUG0bwSAAMF B9G8EoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEADWx6aTt4wfyrZlL2GO8q4byuseuLVcXEIVPNDFTJ7zq5 8tgnCZfVB1vAdA4k9I806EnbRB+wRRN14E8HLSukBRjJnCsJn5kSdw0txat+Eg1X 8nCrxE+6vDv1eOXtXUMd90ylCTfGlZpRzAZpfyBhCCHHx+koUEfoMKSEPaiBr6si zEYa2pWYSfRs8yQM+rySpF+KDRyvt87sjlZ8YKNX3i8ud4c3UEhQE/Db+rVT1VRl 5NK56wFNff8s7Gr04dSqt/OG4RttQCrUcDfQZqqB/tlfgTlq6YA1YzhJPMvqnv10 zLRtXiv+/uHGqs2m1R5mlXDhG2sXli5Cix9cZ7WbUA== -----END CERTIFICATE-----Generated at Mon Jun 16 03:24:23 2025 by rpki-client